CVE-2026-5323 Details
Description
A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects the function A11yServer of the file src/index.js. The manipulation results in server-side request forgery. The attack must be initiated from a local position. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Upgrading to version 1.0.6 is able to resolve this issue. The patch is identified as e3e11c9e8482bd06b82fd9fced67be4856f0dffc. It is recommended to upgrade the affected component. The vendor acknowledged the issue but provides additional context for the CVSS rating: "a11y-mcp is a local stdio MCP server - it has no HTTP endpoint and is not network-accessible. The caller is always the local user or an LLM acting on their behalf with user approval."
A server-side request forgery (SSRF) vulnerability exists in the Priyankark a11y-mcp application, specifically in versions up to 1.0.5. The issue arises in the A11yServer function within src/index.js, where user-supplied URLs are not properly validated before being passed to Puppeteer's page.goto() method. This lack of validation allows an attacker to manipulate the request and have the server make requests to internal or external resources, including loopback addresses and cloud metadata endpoints. The vulnerability can be exploited locally, and a public exploit is available.
Users are advised to upgrade to a11y-mcp version 1.0.6, which addresses the vulnerability by adding proper URL validation to prevent server-side request forgery.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 2, 2026CISA-ADP
Assessed Apr 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/priyankark/a11y-mcp/ | [email protected] | ProductSource CodeVendor |
| https://github.com/priyankark/a11y-mcp/commit/e3e11c9e8482bd06b82fd9fced67be4856f0dffc | [email protected] | Source CodeVendor |
| https://github.com/wing3e/public_exp/issues/17 | [email protected] | ExploitIssue TrackingTechnical Description |
| https://vuldb.com/submit/780752 | [email protected] | Technical Description |
| https://vuldb.com/vuln/354655 | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/vuln/354655/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| priyankark a11y-mcp | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 2, 2026 | New CVE Received | [email protected] |